PT-2005-5374 · Red Hat · Jboss Enterprise Java Beans (Ejb) 3.0 Rc3

Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4709

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Java Beans (EJB) 3.0 RC3

Description The issue arises from the popSubjectContext method in the SecurityAssociation class, which fails to properly reset the threadPrincipal and threadCredential values after a client session terminates. This allows remote attackers to potentially gain the roles of an arbitrary previous client who had the same JBoss server thread.

Recommendations For JBoss Enterprise Java Beans (EJB) 3.0 RC3, consider implementing a workaround to reset the threadPrincipal and threadCredential values after each client session termination to prevent unauthorized access. However, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4709

Affected Products

Jboss Enterprise Java Beans (Ejb) 3.0 Rc3

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4709 · Security Note
• http://jira.jboss.com/jira/browse/EJBTHREE-384 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24384 · Note
• http://vupen.com/english/advisories/2006/0374 · Note